Question 1,226 of 1,621
ANS-C01 Network Security, Compliance and Governance Practice Question
A company has a VPC with multiple subnets. They want to block all traffic from the internet to their private subnets, but allow outbound internet traffic from those subnets through a NAT Gateway. Which configuration should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Route table with 0.0.0.0/0 -> NAT Gateway
A route table associated with the private subnets should have a default route (0.0.0.0/0) pointing to the NAT Gateway. This allows outbound internet traffic while blocking inbound internet traffic. Option B (Virtual Private Gateway) is for VPN connections. Option C (VPC Peering) is for connectivity between VPCs. Option D (Internet Gateway) would allow inbound internet traffic, which is not desired.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Route table with 0.0.0.0/0 -> NAT Gateway
Why this is correct
This allows outbound traffic only, as NAT Gateway does not allow inbound connections from the internet.
- ✗
Route table with 0.0.0.0/0 -> Virtual Private Gateway
Why it's wrong here
This is for VPN/Direct Connect, not internet access.
- ✗
Route table with 0.0.0.0/0 -> VPC Peering Connection
Why it's wrong here
This is for traffic to a peered VPC, not the internet.
- ✗
Route table with 0.0.0.0/0 -> Internet Gateway
Why it's wrong here
This would allow inbound internet traffic to the subnet.
Visual reference
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 20, 2026
This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.